CVE

Id
69863  
CVE No.
CVE-2014-2568  
Status
Candidate  
Description
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the absence of a certain orphaning operation. NOTE: the affected code was moved to the skb_zerocopy function in net/core/skbuff.c before the vulnerability was announced.  
Phase
Assigned (20140320)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
667382 69863 CVE-2014-2568 MLIST:[linux-kernel] 20140320 [PATCH v3] core, nfqueue, openvswitch: Orphan frags in skb_zerocopy and handle errors  View
667383 69863 CVE-2014-2568 URL:https://lkml.org/lkml/2014/3/20/421  View
667384 69863 CVE-2014-2568 MLIST:[oss-security] 20140320 Re: CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied  View
667385 69863 CVE-2014-2568 URL:http://www.openwall.com/lists/oss-security/2014/03/20/16  View
667386 69863 CVE-2014-2568 MLIST:[oss-sec] 20140320 CVE request -- kernel: net: potential information leak when ubuf backed skbs are skb_zerocopy()ied  View
667387 69863 CVE-2014-2568 URL:http://seclists.org/oss-sec/2014/q1/627  View
667388 69863 CVE-2014-2568 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1079012  View
667389 69863 CVE-2014-2568 BID:66348  View
667390 69863 CVE-2014-2568 URL:http://www.securityfocus.com/bid/66348  View
667391 69863 CVE-2014-2568 SECUNIA:59599  View
667392 69863 CVE-2014-2568 URL:http://secunia.com/advisories/59599  View
667393 69863 CVE-2014-2568 XF:linux-kernel-cve20142568-info-disclosure(91922)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
16172 JVNDB-2014-005047 Claws Mail の plugins/rssyl/feed.c におけるサーバになりすまされる脆弱性 Claws Mail の plugins/rssyl/feed.c は、CN または SAN ホスト名フィールド用 CURLOPT_SSL_VERIFYHOST チェックを無効とするため、サーバになりすまされ、man-in-the-middle (MITM) 攻撃される脆弱性が存在します。 CVE-2014-2576 69863 6.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005047.html  View